*Reprompt: The Single-Click Microsoft Copilot Attack Silently Stealing Personal Data*

The post introduces an attack called Reprompt, which exploits Microsoft Copilot to extract personal data with just a single click. The attack leverages prompt injection and data exfiltration techniques to bypass security protections. It enables an attacker to retrieve sensitive information without requiring any further interaction from the victim. The mechanism relies on Copilot’s integration into applications like Microsoft 365.